From 04fda2d46d547afddf9c4a0d03c2bea48a7149aa Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Mon, 3 Oct 2016 07:56:04 +0200 Subject: [PATCH] attribute_count added + fixes --- misp-core-format/raw.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/misp-core-format/raw.md b/misp-core-format/raw.md index c7844c5..b6b9da2 100644 --- a/misp-core-format/raw.md +++ b/misp-core-format/raw.md @@ -135,13 +135,13 @@ date is represented as a JSON string. timestamp represents a reference time when the event was created. timestamp is expressed in seconds (decimal) since 1st of January 1970 (Unix timestamp). The time zone MUST be UTC. -timestamp is represented as a JSON string. +timestamp is represented as a JSON string. timestamp MUST be present. #### publish_timestamp publish_timestamp represents a reference time when the event was published. published_timestamp is expressed in seconds (decimal) since 1st of January 1970 (Unix timestamp). At each publication of an event, publish_timestamp MUST be updated. The time zone MUST be UTC. -publish_timestamp is represented as a JSON string. +publish_timestamp is represented as a JSON string. publish_timestamp MUST be present. #### org_id @@ -158,6 +158,11 @@ orgc_id is globally assigned to an organization and SHALL be kept overtime. orgc_id is represented as a JSON string. orgc_id MUST be present. +#### attribute_count + +attribute_count represents the number of attributes in the event. attribute_count is expressed in decimal. + +attribute_count is represented as a JSON string. attribute_count SHALL be present.